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Computer software may 
be « eoadvctt to spy on 
banks’ data bases. 



U.S. Spy Agency May Be lapping 
Foreign Banks’ Computer Data 

Worid Bank searches for software with eavesdropping bug planted in it 
The World Bank is looking for software WorldBan! 
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Congress Backs Claims That Spy 
Agencies Bugged Bank Software 

A congressional committee turned up evidence that 
U.S. intelligence agencies bugged the computer sys- 
tems of international banks in the early 1980s as part 
of a top secret U.S. intelligence initiative, a Capitol Hill 
source told International Banking Regulator . 

But this information has not been made public 
previously because it was uncovered during the final 
stages of a congressional probe in 1992, too late to 
include in the final report, a congressional source said 
Jan. 19. 

The new information came to light after a Jan. 17 
report by this newsletter describing the vulnerability of 
foreign banks to U.S, spy agencies. The source, who 
asked not to be named, said the House Judiciary 
Committee turned up evidence in 1992 that software 
named PROMIS was stolen by Reagan-era Justice De- 
partment officials and sold through private firms to 
international banks after the National Security Agency 
bugged the software to give it access to the banks’ 
records. 

A senior Justice official told IBR the bugged software 
was provided to the World Bank at the behest of the CIA 
following meetings between bank officials and two high- 
level Reagan administration officials, one of whom 
previously worked for the CIA and is still working at 
J usUce. The CIA allegedly wanted PROMIS installed on 
World Bank computers so it would have an “early 
warning of the failure of Latin American banks, a hot 
national security issue at the time. 

World Bank officials told IBR Jan. 18 they were 
j continuing to search for the software. The bank began 
I looking following an inquiry Jan. 4 by Elliot Richardson , 
attorney for the software’s manufacturer, Inslaw Inc. 

— Anthonu Kimerv 
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Worid Bank Unable To Find Bugged Software, 
But Sources Continue To Say It’s There 



The World Bank says it can’t find computer software 
allegedly installed on its computers in 1 983 and bugged by 
tile National Security Agency as part of a top secret 
intelligence initiative to penetrate international banks. 

But several knowledgeable sources continue to corrobo- 
rate allegations, first reported by this newsletter Jan. 17, 
that the bank was provided the software and that the U.S. 
spy agency has been using it to tap into certain computers 
at the World Bank. 

Ibrahim Shihata, the World Bank's general counsel, told 
International Banking Regulator Jan. 26 that bank officials 
assured him there “is no evidence at all" that software 
named PROM1S had ever been used by the bank. 

ZBR also talked with numerous bank computer techni- 
cians who deal with the kind of computers on which the 
software allegedly was installed. These technicians said 
they had never heard of it. They conceded that It could be 
called something else or be operating on an isolated 
computer they don t know about. “We just don’t know any 
software by this name," one said. 

The bank began looking for the software following an 
inquiry Jan. 4 by Elliot Richardson, a former U.S. attorney 
general and the attorney for the program’s maker. Inslaw 
Inc. PRO MIS was originally provided by Inslaw to the 
Justice Department for tracking criminal cases. Inslaw 



alleges that a different proprietary version designed for 
VAX computers was provided to Justice under a modifi- 
cation to the original contract and that Reagan -era 
Justice Department officials stole the modified version 
and began selling it under other names through private 
companies. The modified version was bugged by the NSA 
so the U.S. could tap computers running the program, all 
with the blessing of top intelligence executives. 

World Bank computer specialists did confirm to IBR 
however, that the bank has used VAX computers since 
1983 in the cable room for handling international mes- 
sage traffic, for “financial forecasting," and for tasks such 
as woid processing. According to Bill Hamilton, president 
of Inslaw, PROMIS could be running on any VAX in the 
bank and yet be able to access all the others. “It wouldn’t 
have to be physically on those in the cable room.” he said. 

One official at the J ustice Department who agreed to 
speak to IBR on a confidential basis said that he is sure 
that the software was provided to the bank, continues to 
be used, and has had major modifications made to it. He 
indicated that the software was part of a major U.S. 
intelligence operation and said all Involvement with it at 
Justice is closely guarded. He added that there have been 
numerous reprimands of people who have spoken out 
about it. •—4 nfllrini I 




